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ABSTRACT 

Two  new  classes  of  schemas  are  introduced:   the  reachable  sohemaa  and  the 
semifree  schemas.  A  schema  is  reachable  if  every  statement  in  the  schema  is 
executed  under  some  interpretation.  A  schema  is  semifree  if  every  test  in  the 
schema  is  necessary  in  the  sense  that  each  exit  of  the  test  is  taken  under 
some  interpretation. 

It  is  shown  that  most  of  the  standard  decision  problems  are  unsolvable 
for  schemas  in  these  two  classes,  and  that  there  can  be  no  algorithm  which 
effectively  translates  an  arbitrary  schema  into  an  equivalent  reachable  or 
semifree  schema,  even  though  such  equivalent  schemas  always  exist.   These 
classes  are  also  compared  to  the  free  and  liberal  schemas,  and  interc:^ass 
translatability  questions  are  investigated.   It  is  demonstrated  that  every 
reachable  schema  can  be  effectively  translated  into  a  semifree  schema,  even 
though  it  is  not  decidable  whether  a  reachable  schema  is  semifree. 


Key  words:  program  schema,  flowchart  schema,  abstract  program, 
translatability,  decision  problems 
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1. INTRODUCTION  and  DEFINITIONS 

For  several  years,  people  have  studied  abstractions  of  computer  programs 
known  as  program  schemas.   A  great  deal  of  work  has  been  done  compar.ng  the 
relative  computational  power  of  classes  of  schemas  with  additional  features 
[1],  [2],  [8].  We  are  interested  in  considering  classes  of  schemas  v.hose 
members  fulfill  certain  semantic  requirements.  We  introduce  two  such  classes 
of  schemas,  the  semifree  schemas  and  the  reachable  schemas,  and  consider 
various  decision  problems  for  these  classes.   We  also  consider  the  relative 
power  of  these  classes.   We  compare  them  to  the  class  of  all  schemas  as  well 
as  to  other  well-known  semantically  restricted  classes.  We  use  a  program 
schema  model  based  largely  on  the  one  formulated  by  Luckham,  Park,  and 
Paterson  [6]. 

We  have  a  formal  language  whose  alphabet  consists  of  the  following 
disjoint  sets  of  symbols: 

(i)  Variable  or  Location  Symbols,  denoted  by  the  letters  u,v,w,x,y,z.   The  set 
of  variables  is  divided  into  three  disjoint  subsets  X,Y,  and  Z.   The  set  X 
contains  the  input  variables.  Y  is  the  set  of  program  variables .  and  Z  is  the 
set  of  output  variables.   The  value  of  a  variable  in  X  may  be  retrieved  but 
never  changed,  whereas  an  element  of  Z  may  be  assigned  a  value,  but  may  never 
be  retrieved  from.   An  element  of  Y  may  either  be  retrieved  from  or  assigned 
to  provided  it  has  been  assigned  a  value  before  it  is  retrieved  from  or 
tested. 

(ii)  Function  Symbols,  denoted  by  the  letters  f,g,h. 
(iii)  Predicate  Symbols,  denoted  by  the  letters  p,q,r,s,t. 
(iv)  Distinguished  Symbols:   START,  HALT,  (,  ),  <- ,  numerals,  comma. 
Each  of  the  symbols  in  i,  ii ,  and  iii  may  appear  with  or  without  a  subscript. 


The  language  has  four  types  of  statements,  knov.Ti  as  the  legal  statements: 

(i)  Start  Statement:   START 

(ii)  Assignment  Statement:   y  4-  f(y  ..-.y  ) 

1     n 

where  y  ,...,y  are  elements  of  XUY,  y  is  an  element  of  YUZ,  and  f  is  an 
1      n 

n-ary  function  symbol, 

(ill)  Test  Statement:    p(y^,---.y  ) 

v/here  y  y  are  elements  of  XUY  and  p  is  an  n-ary  predicate  symbol. 

(iv)  Halt  Statement:   HALT 

A  flow  diagram  is  a  labelled  directed  grapn  (see  [5]  for  basic  graph 
theory  definitions)  tach  of  whose  vertices  is  labelled  by  a  legal  statement 
and  such  that: 

(i)  A  vertex  labelled  with  a  start  statement  has  no  edges  entering  it  and  one 
edge  exiting  from  it. 

(ii)  A  vertex  labelled  with  an  assignment  statement  has  at  least  one  edge 
entering  it  and  exactly  one  edge  exiting  from  it. 

(lii)  A  vertex  labelled  with  a  test  statement  has  at  least  one  edge  entering 
it  and  exactly  two  edges  exiting  from  it  which  are  labelled  0  and  1. 
Occasionally  we  will  extend  the  notation  to  include  n-exit  tests.   This  is 
simply  a  matter  of  notational  convenience  and  could  equally  be  represented  by 
a  series  of  (n-1)  two-exit  tests. 

(iv)  A  vertex  labelled  with  a  halt  statement  haa  at  least  one  edge  entering  it 
and  no  edges  exiting  from  it. 

A  program  schema  P  is  a  finite  flow  diagram  with  the  following 
restrictions: 
(i)  There  is  exactly  one  vertex  labelled  START. 


(11)  Each  vertex  lies  on  a  path  from  the  vertex  labelled  START. 
(ill)  On  every  path  from  the  start  statement,  if  u  is  a  variable  in  yUz,  then 
u  is  assigned  a  value  before  it  is  retrieved  from  or  tested.   That  is,  on 
every  path,  u  must  appear  on  the  lefthand  side  of  an  assignment  statement 
before  it  may  appear  on  the  righthand  side  of  an  assignment  or  test  statement. 
We  note  that  this  is  a  purely  syntactic  requirement. 

The  semantics  of  a  schema  is  provided  by  an  interpretation  which 
specifies  a  domain,  assigns  actual  functions  and  predicates  to  the  function 
and  predicate  symbols  of  the  schema,  and  also  assigns  initial  values  from  the 
domain  to  each  input  variable.   Throughout  this  paper  we  use  I(p("x))  and 
I(f(x))  respectively  to  stand  for  the  value  of  l(p)  and  1(f)  applied  to  l(x)  . 

A  Herbrand  interpretation  of  a  schema  P  is  any  interpretation  I  with  the 
following  properties.   The  domain  D  is  the  set  of  syntactically  well-formed 
strings  over  the  input  variables  and  function  symbols  of  the  schema,  I(x)=x 
for  every  input  variable  x,  and  I(f(u  ,...,u  ))=fu  ...u  for  every  n-ary 
function  symbol  f  of  P  and  u  ,...,u6D.   Note  that  the  interpretation  of  P's 
predicate  symbols  is  not  restricted  in  any  way. 

The  execution  sequence  for  schema  P  under  interpretation  I  consists  of 
the  sequence  of  statements  of  P  executed  under  1.   Note  that  in  defining  both 
the  syntactic  notion  of  a  path,  and  the  semantic  notion  of  an  execution 
sequence,  care  must  be  taken  in  two  circumstances.   If  either  more  than  one 
exit  of  a  test  statement  enter  the  same  vertex,  or  enter  distinct  vertices 
labelled  with  the  same  statement,  then  an  indication  of  which  exit  was 
selected  is  necessary  to  completely  specify  the  path  or  execution  sequence. 

For  each  interpretation  I,  the  computation  of  the  schema  P  either 
terminates  (i.e.  reaches  a  halt  statement),  or  diverges.   In  the  former  case 


the  value,  denoted  val(P,I),  is  the  n-tuple  of  curr'ent  values  of  P's  n  output 
variables.   If  P  diverges  under  I  or  if  any  output  variable  has  never  been 
assigned  a  value,  then  val(P,l)  is  undefined. 

We  say  two  schemas,  P  and  Q,  are  strongly  equivalent,  denoted  P^Q.  if 
for  every  interpretation  I,  either  both  val(P,l)  and  val(Q,I)  are  defined  and 
val(P,I)=val(Q,I) ,  or  both  values  are  undefined, 

A  class  of  schemas  u,  is  translatable  into  a  class  U-,  if  for  every 
P  e  (^  ,  there  is  a  strongly  equivalent  P  e  L    • 

2.   SEMANTICALLY  RESTRICTED  CLASSES  OF  SCHEMAS 

Paterson  [7]  introduced  the  notions  of  freedom  and  liberality  as  semantic 
restrictions  on  the  class  of  schemas.  He  felt  that  such  restricted  classes  of 
schema  might  have  solvable  decision  problems, 

A  schema  is  free  if  every  finite  path  through  its  flow  diagram  from  the 
start  statement  is  an  initial  segment  of  some  execution  sequence.   This 
property  has  been  shown  [7]  to  be  equivalent  to  the  restriction  that  under  no 
Herbrand  interpretation  is  any  predicate  symbol  of  rank  n  ever  applied  to  an 
n-tuple  of  elements  of  the  universe  more  than  once. 

A  schema  is  liberal  if  for  every  Herbrand  interpretation,  no  element  of 
the  universe  is  computed  more  than  once,  i.e,  each  particular  n-tuple  of 
elements  of  the  universe  is  an  argument  of  each  function  symbol  at  most  once, 

A  statement  in  a  schema  is  reachable  if  there  is  an  interpretation  under 
which  that  statement  is  executed.  A  schema  P  is  reachable  if  every  statement 
in  P  i.s  reachable. 

A  schema  P  is  semifree  if  for  every  edge  in  the  flow  diagram  of  P,  there 
is  some  interpretation  under  which  that  edge  is  traversed. 

We  use  -'^j  <A  ,/(,</ ,  and  U     to  represent  the  classes  of  free,  liberal, 


reachable,  semifree,  and  all  schemas,  respectively.   It  follows  easily  from 
our  definitions  that  ^- J  ^  (yf  ^--^. 

The  schema  of  figure  1  is  ar  example  of  a  nonreachable  schema,  as  the 
HALT  can  never  be  executed.   If  ve  modify  the  schema  and  have  the  0-exit  of 
the  second  p(y)  test  (labelled  2)  enter  the  halt  statement  rather  than 
returning  to  point  Taj,  the  schema  is  reachable  but  not  :;emifree,  as  the 
1-exit  of  this  test  may  never  be  taken.   If  in  addition  to  the  above 
modification  of  the  schema  of  figure  1,  we  have  the  1-exit  of  the  first  p(y) 
test  (labelled  1)  enter  the  second  p(y)  test  and  delete  the  assignment 
statement  y^~f(y),  the  resulting  schema  is  semifree  but  not  free.   Thus  it 
follows  that  each  of  the  inclusions  is  strict. 

2.1  REACHABLE  SCHEMAS 

It  has  been  shown  [?]  that  C^  is  not  translatable  itito  -^  or  A.     In 
contrast  to  these  results,  it  is  interesting  to  note  that  corresponding  to 
every  schema  P,  there  is  a  semifree  (and  hence  reachable}  version  Q. 
Unnecessary  tests  of  P  must  be  removed,  as  well  as  any  unreachable  code.   To 
remove  an  unnecessary  test,  its  direct  predecessors  must  first  be  connected  to 
the  statement  at  the  exit  which  is  always  taken,  and  then  the  test  may  be 
deleted.  Pieces  of  code  which  become  syntactically  inaccessible  as  a  result 
of  such  modifications  must  then  also  be  removed.  Thus  we  have  immediately: 

Proposition  1  ('is  translatable  into  ^j ,   and  hence  into  ^^.D 

We  see,  however,  that  this  translation  is  not  effective. 

Lemma  Z.   It  is  decidable  whether  a  reachable  schema  P  halts  under  some 
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interpretation. 

Proof:   P  halts  under  some  interpretation  iff  it  contains  a  halt  stdtement.n 

Theorem  ^  There  is  no  algorithm  which,  given  an  arbitrary  schema  P,  constructs 
a  reachable  schema  Q,  such  that  P^Q. 

Proof:   Assume  such  an  algorithm  existed.   Then  by  Lemma  2,  it  would  be 
decidable  whether  Q,  and  hence  P,  halted  under  some  interpretation.   But  this 
is  a  well-known  [?]  undecidable  property  for  arbitrary  schemas.Q 

Thus  although  for  every  schema  there  is  a  strongly  equivalent  reachable 
schema,  we  cannot  in  general  effectively  obtain  it.  We  next  see  that 
reachability  is  an  undecidable  property  for  schemas. 

The  notion  of  reachability  in  schemas  is  analogous  to  state  accessibility 
in  Turing  machines,  and  as  the  next  results  indicate,  reachability  is  an 
undecidable  property  of  schemas  for  precisely  the  same  reasons  that  state 
accessibility  is  an  undecidable  property  of  Turing  machines. 

Lemma  i  It  is  not  decidable  whether  an  arbitrary  assignment  statement  of  a 
schema  is  reachable. 

Proof:   Let  P  be  an  arbitrary  schema.  We  assume  without  loss  of  generality 
that  P  contains  a  single  halt  statement.  We  construct  a  schema  Q  from  P  by 
replacing  the  halt  statement  of  P  by  an  assignment  statement  s,  followed  by  a 
halt  statement.   Then  if  it  were  decidable  whether  s  is  reachable  in  Q,  it 
would  be  decidable  whether  P  halted  under  some  interpretation -D 

Theorem  5.  It  is  not  decidable  whether  a  schema  is  reachable. 

Proof :   We  prove  this  theorem  by  showing  that  there  is  an  algorithm  which. 


given  an  arbitrary  schema  P  and  assignment  statement  s.  of  P,  constructs  a 

schema  Q  such  that  0  is  reachable  iff  s   is  reachable  in  P.   Let  P  be  an 

arbitrary  schema  with  statements  s  ,...,s  .   Let  Sj^  be  an  assignment  statement 

of  P.   Let  p  oe  an  n-exit  predicate  symbol  which  does  not  appear  in  P.  We 

construct  schema  Q  from  P  by  inserting  an  initializing  assignment  statement, 

y<-f(x),  immediately  follov.ing  the  start  statement.   The  notation  indicates 

that  we  are  assigning  the  value  f(x),  where  x  is  some  input  variable,  to  every 

program  variable  y.   This  is  done  simply  to  guarantee  that  every  program 

variable  is  a; signed  a  value  before  it  is  retrieved  from.   We  also  insert  the 

test  p(x)  af t(  r  instruction  s  .   The  branch  from  the  m-th  exit  of  p  enters 

j;tatement  s  .   The  construction  of  Q  is  outlined  in  figure  2.   Clearly  s,  is 
m  K 

I'eachable  in  P  iff  Q  is  a  reachable  schema. □ 

Before  considering  similar  questions  for  ,//  ,  we  consider  two  other 
decision  problems  for  l/i. 

Lemma  A   (Paterson  [7])   It  is  not  decidable  whether  an  arbitrary  schema  P 
halts  under  every  interpretation. Q 


Theorem  ^  It  is  not  decidable  whether  a  reachable  schema  halts  under  every 

interpretation. 

Proof :   We  present  an  algorithm  which  for  a  given  schema  P,  produces  a 

reachable  schema  Q  which  halts  under  every  interpretation  iff  P  does. 

Assume  P  contains  n+1  statements  labelled  0,1,..., n  with  0  the  start 
statement  and  1  the  unique  successor  of  the  start  statement.  We  assume 
without  loss  of  generality,  that  P  contains  exactly  one  halt  statement,  and 
that  it  is  labelled  n. 
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Let  p,q  ,...,q    ,r  be  predicate  symbols  which  do  not  appear  in  P. 
1      n-1 

Intuitively,  Q  can  be  in  one  of  two  distinct  modes,  depending  on  the 
interpretation  of  the  test  p(x).   If  l(p(x))  =  1,  then  the  schema  is  in 
"reachability  mode"  .   This  mode  guarantees  that  every  instruction  of  Q  can  be 
reached.   If  I(p(x))  =  0,  then  the  schema  is  in  "simulation  mode",  and  is 
effectively  simulating  the  computation  of  P  under  interpretation  I. 
Furthermore,  since  x  is  an  input  variable,  and  thus  can  never  be  assigned  a 
new  value,  once  a  mode  is  determined,  it  cannot  be  changed.  We  construct  Q  as 
shown  in  figures  3a-d. 

Wa  call  the  subschema  of  figure  3a  the  initial  subschema,  y  4-  f(x)  is 
an  initializing  assignment  statement,  as  described  in  Theorem  5.   We  let  s(i) 
denote  the  instruction  in  P  labelled  i. 

case  1   If  s(i),  i=l,...,n-1,  is  an  assignment  statement  in  P  such  that  the 
succes:.or  of  s(i)  is  s(j),  then  in  Q  we  have  the  subschema  shown  in  figure  3t). 
case  2  If  s(i),  i=1,...,n-1,  is  a  test  statement  in  P  with  0-successor  s(k), 
and  1-.;uccessor  s(j),  then  in  Q  we  have  the  subschema  shown  in  figure  3c. 
case  3.  s(n)  is  the  halt  statement  in  P,   Then  in  Q  we  have  the  subschema 
shown  m  figure  3d. 

Note  that  a  schema  Q  does  not  in  general  contain  all  of  the  predicate 

symbols  q  ,...,q    but  contains  one  q  for  each  test  statement  in  P.   The 
1      n-1  i 

extra  predicate  symbols  are  included  simply  to  facilitate  the  notation. 

In  either  mode,  we  are  not  interested  in  the  value  calculated  by  Q.   If 
l(p(x))  =  0,  then  P  halts  under  interpretation  I  if  and  only  if  Q  halts  under 
interpretation  1.   If  I(p(x))  =  1  then  Q  halts  regardless  of  P's  behavior 
under  interpretation  I. 

We  also  point  out  here  the  reason  for  the  test  statements  q  and  r.  They 
are  only  encountered  under  interpretations  which  put  the  schema  into 
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reachability  mode  and  are  in  fact  used  to  guarantee  that  every  statement  is 

reachable.   In  the  case  that  s(i)  is  a  test  statement,  we  cannot  guarantee 

that  there  is  some  interpretation  which  makes  the  value  of  s(i)  under  that 

interpretation  1,  and  some  other  interpretation  such  that  the  value  of  s(i)  is 

0.   Hence  it  is  possible  that  one  of  the  two  test  statements  p(x)  might  not  be 

reachable.   By  adding  the  tests  q  (x),  where  q  does  not  appear  anywhere  else 

i  i 

in  the  schema  Q,  we  can  guarantee  that  both  p(x)  tests  are  reachable. 

To  see  that  Q  is  reachable,  note  that  subschema  1  is  reachable,  that 
subschema  i+1  is  always  reachable  from  subschema  i  when  I(p(x))=1,  and  that 
every  statement  within  each  subschema  is  reachable  when  I(p(x))=1. 

Our  final  task  is  to  show  that  Q  halts  under  every  interpretation  if  and 
only  if  P  does.   If  Q   halts  under  every  interpretation,  then  P  halts  under 
every  interpretation  for  which  l(p(x))=0.   But  p  is  not  a  predicate  symbol  in 
P's  language,  and  hence  P's  behavior  under  an  interpretation  must  be 
independent  of  the  interpreted  value  of  p.   Thus  P  halts  under  every 
interpretation. 

If  P  halts  under  every  interpretation,  then  Q  halts  under  every 
interpretation  I  such  that  l(p(x))=0.   Furthermore,  Q  has  been  constructed  so 
that  under  an  interpretation  I  for  which  I(p(x))r1,  the  subschemas  1,2,...,n 
are  executed  in  order  and  then  the  schema  halts.  Thus  Q  halts  under  every 
interpretation . 

Thus  we  have  sho-m  that  Q  is  a  reachable  schema  which  is  constructed 
effectively  from  an  a-bitrary  schema  P  and  such  that  Q  halts  under  every 
interpretation  if  and  only  if  P  halts  under  every  interpretation.   Therefore, 
if  we  could  decide  whether  a  reachable  schema  halts  under  every 
interpretation,  we  cojld  decide  whether  an  arbitrary  schema  halts  under  every 
interpretation,  contr ^dieting  Lemma  A.Q 
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Corollary  7  It  is  not  decidable  whether  two  reachable  schemas  are  strongly 

equivalent. 

Proof:   Let  P  be  a  reachable  schema  with  input  variable  x,  and  output 

variables  z   , ,z   .  Let  Q  be  the  reachable  schema  shown  in  figure  Ma. 

Note  that  Q  halts  under  every  interpretation. 

We  construct  schema  R  by  replacing  each  halt  statement  of  P  by  the 
sequence  of  instructions  of  figure  4b.  Clearly  R  is  reachable  iff  P  is 
reachable.  Also,  Q  =R  iff  R  halts  under  every  interpretation 

iff  P  halts  under  every  interpretation. 

Thus  if  strong  equivalence  were  decidable  for  reachable  schemas,  we  could 
decide  whether  a  reachable  schema  halts  under  every  interpretation, 
contradicting  Theorem  6.0 

2.2  SEMIFREE  SCHEMAS 

The  semifree  schemas  represent  a  restriction  on  the  class  of  reachable 
schemas.   Not  only  must  we  be  able  to  reach  every  sta:;ement  in  the  schema,  but 
we  must  also  be  able  to  leave  via  any  exit-  Paterson  [7]  showed  that  a  schema 
is  free  iff  it  does  not  contain  any  repeated  tests.  Furthermore,  there  are 
schemas  which  are  inherently  nonfree  in  the  sense  that  they  are  not  strongly 
equivalent  to  any  free  schema,  and  thus  must  repeat  some  tests  in  order  to  do 
the  desired  computation.   In  contrast  to  this.  Proposition  1  stated  that  there 
are  no  inherently  nonsemifree  schemas. 

We  say  that  a  test  t  is  necessary  if  there  are  interpretations  I  and  I 

such  that  the  0-exit  of  t  is  taken  under  I  and  the  1-exit  is  taken  under  I  . 

0  1 

Proposition  5.  A  schema  P  is  semifree  iff  every  test  in  P  is  necessary. D 


13 


Q START  J 

( 

• 

z,  -  f(x) 

1 

• 
• 
• 

i 

2n-f(x) 

'  ' 

(^HALT    ^ 

'  ' 

^1 

<»^  f(x) 

• 
• 
• 

i 

^r 

,-^f(x) 

'  • 

c 

HALT    ^ 

4a 


4b 


FIGURE    4 


14 


Theorem  3.   There  is  no  algorithm  which  given  an  arbitrary  schema  P,  constructs 

a  semifree  schema  Q,  such  that  P  E  Q. 

Proof:   This  is  a  direct  consequence  of  Theorem  3  and  the  observf.tion  that 

We  now  discuss  an  interesting  situation  which  underscores  the  necessity 
of  considering  both  the  letter  and  the  spirit  of  a  result.  Our  next  theorem 
demonstrates  that  for  any  reachable  schema,  we  can  construct  a  strongly 
equivalent  semifree  schema.   At  first  glance,  that  seems  like  a  very  desirable 
situation.   It  seems  to  say  that  if  we  know  that  we  do  not  have  any 
unreachable  code,  then  we  can  effectively  get  rid  of  any  unnecessary  tests. 
However,  the  theorem  does  not  really  say  that  at  all.  The  construction  used 
in  the  proof  below  will  cause  just  the  opposite  to  happen.  Instead  of 
deleting  unnecessary  tests,  we  will  add  additional  tests  and  code  in  order  to 
force  the  newly  constructed  schema  to  be  semifree. 

We  would  really  like  to  begin  with  a  reachable  schema,  and  if  it  is  not 
semifree,  delete  exactly  the  unnecessary  tests  and  be  left  with  a  "reduced" 
strongly  equivalent  semifree  schema.  Theorem  14  shall  demonstrate  that  such  a 
procedure  is  not  possible. 

Theorem  10  There  is  an  algorithm  which  given  an  arbitrary  schema  P,  produces  a 

strongly  equivalent  schema  Q,  such  that  Q  is  semifree  iff  P  is  reachable. 

Proof:  Assume  P  contains  n  test  statements,  designated  t  ,...,t  .  Let  k  and 
'     ^  i'    '  n       0 

k  denote  test  t  's  0-  and  1-successor  respectively,  k=1,...,n.  Let  p,  q,  and 
1  k 

s  be  predicate  symbols  not  appearing  in  P. 

We  build  Q,  shown  in  figure  5,  as  follows.   It  contains  two  slightly 

modified  copies  of  schema  P,  which  we  call  P  and  P  .   If  a  is  the  first 

L      R 


r   START  ^ 

1 

< 

y  *-f(x) 

1 

FIGURE    5 
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statement  following  the  start  statement  of  P,  then  the  corresponding 

statements  in  P  and  P  are  called  a  and  a  respectively. 
L      R  L      R 

For  a  given  interpretation  I,  Q  is  entered  and  one  of  four  conaitions 
holds.   If  l(s(x))=0  and  l(p(x))=0  the  computation  proceeds  through  P  exactly 

Li 

as  it  would  through  P  with  the  addition  of  repeated  testing  of  p(x)  and  s(x)  . 

Similarly,  if  I(s(x))=1  and  l(p(x))=1,  the  computation  proceeds  through  P  . 

R 

If  l(s(x))=0  and  I(p(x))=1,  then  q  is  tested  and  one  of  the  n  tests  of  P  is 

Lj 

selected  and  applied.  Next  p(x)  and  s(x)  are  retested  and  then  P  is  entered 

R 

at  a  and  the  computation  proceeds  as  it  would  through  P  under  I.   Similarly, 

H 

if  l(s(x))=1  and  l(p(x))=0  some  test  of  P  is  selected,  P  is  entered  at  a 

H  L  L 

and  the  computation  proceeds  as  through  P  under  I.   Thus  PsQ. 

A  straightforward,  but  tedious  argument  verifies  that  Q  has  the  required 
properties,  and  is  omitted  here.P 


As  we  mentioned  previously,  this  theorem  is  interesting  since  it  points 
out  that  a  semifree  schema  is  not  necessarily  "optimized",  or  even  an 
improvement  over  an  equivalent  schema  which  is  not  semifree.   It  is  also 
useful  as  several  results  follow  as  corollaries  to  it. 

Corollary  11  It  is  not  decidable  whether  an  arbitrary  schema  is  semifree. D 

Corollarv  12  It  is  not  decidable  whether  a  semifree  schema  halts  under  every 

interpretation. 

Proof:   Follows  immediately  from  Theorem  10  and  Theorem  6.0 

Corollarv  J3.  It  is  not  decidable  whether  two  semifree  schemas  are  strongly 
equivalent. 
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Proof:   Follows  immediately  from  Theorem  10  and  Corollary  Y.D 

3.   RELATIONSHIPS  BETWEEN  -^  AND  J    AND  OTHER  SEMANTICALLY  RESTRICTED 
CLASSES  OF  SCHEMAS 

We  have  seen  in  the  previous  section  that  many  properties  are  not 
decidable  for  schemas  in  'A  and  y) ,   and  in  fact  even  membership  in  these  two 
classes  is  undecidabLe.   In  this  section  we  investigate  under  what 
circumstances  knowing  that  a  schema  possesses  certain  desirable  properties, 
enables  one  to  decide  whether  it  has  other  desirable  properties. 

Theorem  14  It  is  not  decidable  whether  a  reachable  schema  is  semifree. 

Proof:   Let  P  be  an  2rbitrary  schema.   We  construct  a  reachable  schema  Q  which 

Is  semifree  if  and  or ly  if  P  is  semifree.   Since  semifreedom  is  undecidable 

for  arbitrary  schemas,  we  cannot  decide  whether  a  reachable  schema  is 

semifree . 

Assume  P  contains  n  test  statements  designated  t,,...,t  .   The 

In 

O-successor  of  statement  t  is  denoted  by  k  ,  and  the  1-successor  is  denoted 

by  k  .   Let  t  be  the  first  test  statement  encountered  under  every 

interpretation  (i.e.  t   is  the  test  statement  nearest  to  START).  Then  1   and 

1   denote  the  0-  and  1-  successors  of  t   ,  respectively. 

Let  p  be  a  predicate  symbol  not  appearing  in  P.   Let  q  be  a  2n-€xit 

predicate  symbol' not  appearing  in  P.   The  exits  of  q  are  labelled 

t  0,t  0,...,t  0,t  1,...,t  1.   We  construct  Q  from  P  by  inserting  2n+1  copies 
12r)1n 

of  the  test  statement  p(x)  and  one  copy  of  the  test  statement  q(x)  ir  the  flow 
diagram  of  P  as  follows: 

(1)   Immediately  after  the  start  statement  of  P,  insert  an  initializing 
statement  "y  <—  f(x)  followed  by  the  statement  p(x).  The  0-successor  of  this 
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test  is  the  statement  which  is  the  successor  of  the  start  statement  in  P;  we 
designate  that  statement  a.  The  1-successor  of  the  p(x)  otatement  is  the  test 
statement  q(x) . 

(2)  Insert  one  copy  of  the  test  statement  p(x)  as  the  0-successor  of  each 

test  statement  t  ,  k  =  1,...,n.  Both  the  0-  and  1-successors  of  p(x)  will  be 
k 

the  statement  k  of  P.   Similarly,  we  insert  one  copy  of  p(x)  as  the 

1-successor  of  t  .   Both  the  0-  and  1-successors  of  this  copy  of  the  test 

k 

statement  p(x)  will  be  statement  k  of  P. 

1 

(3)  The  2n  successors  of  the  test  statement  q(x)  are  the  2n  copies  of  p(x) 
inserted  in  step  2  above. 

Thus  we  have  constructed  the  schema  Q  whose  outline  is  shown  in  figure  6. 
Intuitively  we  can  think  of  Q  as  being  divided  into  2n+1  segments  of  code,  the 
entrance  to  each  segment  being  controlled  by  the  interpretation  of  the  initial 
p(x)  test  and  the  q(x)  test. 

A  straightforward  argument  can  be  used  to  verify  that  the  schema  Q,  so 
constructed,  has  the  required  properties.  The  complete  proof  appears  in  [9]-D 

Since  every  free  schema  is  semifree,  one  might  hope  that  semifreedom 
would  be  sufficient  to  allow  us  to  decide  freedom.  The  next  theorem  tells  us 
that  this  is  not  the  case. 

Theorem  15  It  is  not  partially  decidable  whether  a  semifree  schema  is  free. 
Proof:  Assume  such  a  partial  decision  procedure  existed.   It  has  been 
demonstrated  [9]  that  semifreedom  is  partially  decidable.   Thus  we  can  apply 
the  hypothesized  partial  decision  procedure  and  select  the  semifree,  free 
schemas.  But  ^  ~  fo    and  hence  we  would  have  a  partial  decision  procedure  for 
freedom,  which  Paterson  [7]  showed  was  not  partially  decidable. □ 
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Although  the  decidability  of  the  equivalence  problem  for  free  schemas 
remains  an  open  problem,  it  is  easy  to  demonstrate  that  the  following  related 
question  is  unsolvable.  The  proof  uses  an  argument  similar  to  that  of 
Corollary  7. 

Theorem  16  It  is  not  decidable  whether  a  semifree  schema  and  a  free  schema  are 
strongly  equivalent. □ 

Theorem  17  There  is  no  algorithm  which,  given  a  semifree  schema,  produces  a 
strongly  equivalent  free   schema. 

Proof:  Follows  from  Corollary  12  and  the  observation  that  it  is  decidable 
whether  a  free  schema  halts  under  every  interpretation. D 

We  next  consider  how  X  is  related  to  (/\^  and  -/).  Paterson  [7]  showed 
that  <A  is  effectively  translatable  into  A  'l ^ .     Thus  A^    is  effectively 
translatable  into  ^\    and  ,<i)  .  The  schema  shown  in  figure  1  is  a  sample 
example  of  a  liberal  schema  which  is  not  reachable,  and  hence  neither  semifree 
nor  free . 

Lemma  18  It  is  decidable  whether  a  liberal  schema  halts  under  some 

interpretation. 

Proof:  Follows  from  Paterson' s  construction.  Lemma  2,  and  the  fact  that 

Theorem  19  It  is  decidable  whether  an  arbitrary  statement  in  a  liberal  schema 

is  reachable. 

Proof;  Let  P  be  a  liberal  schema  with  statements  s-  ,...,s   .  For  each  k, 
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l^k^n,  we  construct  a  liberal  schema  P   from  P,  such  that  P   halts  under 

some  interpretation,  iff  s   is  reachable  in  P.   To  construct  P   ,  we  replace 

each  halt  statement  of  P  by  a  LOOP  statement,  and  statement  s   by  a  halt 

statement.   If  statement  s   was  anything  other  than  a  halt  statement,  we 

k 

remove  all  edges  leaving  s   ,  and  delete  any  portions  of  the  flow  diagram 

which  are  disconnected  as  a  result  of  this  replacement.  Thus  we  have  the 

schemas  outlined  in  figure  7. 

Since  P  is  liberal,  and  the  construction  of  P  from  P  does  not  add  anv 

k  ^ 

new  calculations,  P  is  also  liberal.   Furthermore,  since  P  contains  only  the 

k  k  -^ 

singlo  HALT  statement,  in  place  of  P's  s  ,  it  is  clear  that  P  halts  under 

k  k 

some  interpretation  if  and  only  if  s  is  reachable  in  P.   From  Lemma  18  it  is 

k 

decidible  whether  P  halts  under  some  interpretation,  and  hence  whether  s  is 

k 

reachable  in  P.Q 


Corollary  20  It  is  decidable  whether  a  liberal  schema  is  reachable. D 

f;ince  reachability  of  individual  statements  is  decidable  for  liberal 
schemas,  we  can  remove  the  unreachable  ones.   Thus  we  have: 

Corollary  21  There  is  a  procedure  which  given  a  liberal  schema,  effectively 
constructs  a  strongly  equivalent  schema  which  is  liberal  and  reachable. D 

Theorem  22  It  is  decidable  whether  an  arbitrary  test  statement  of  a  liberal 
schema  is  necessary. 

Proof:   Let  P  be  a  liberal  schema  containing  a  test  statement  t   .  We 

k 

construct  a  liberal  schema  P^  from  P  by  adding  new  assignment  statements  at 
each  exit  of  t  .  It  follows  that  t^  is  necessary  iff  both  new  assignment 
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statements  are  reachable. Q 

Corollary  23  It  is  decidable  whether  a  liberal  schema  is  semifree.D 

Corollary  24  There  is  a  procedure  which,  given  a  liberal  schema,  effectively 
constructs  a  strongly  equivalent  schema  which  is  liberal  and  semifree.D 

We  note  that  both  Corollaries  21  and  24  follow  from  Paterson's  result, 
cited  earlier,  that  ^  is  effectively  translatable  into  X^-^-     The  results  in 
this  paper  to  which  they  are  corollaries  demonstrate  that  the  translation 
procedure  fulfills  both  the  letter  and  the  spirit  of  the  definitions.  This  is 
in  contrast  to  the  result  in  Theorem  10. 
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